This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer File: jvzJdu-QODrOfwtOCeTYGe0Nm14.cer (raw, json) Hash identifier: 072H5iFa9lJFQgghczPrBh8KtRrN+HRM0+dscyNI7tg= Subject key identifier: 8E:FC:C9:76:EF:90:38:3A:CE:7F:0B:4E:09:E4:D8:19:ED:0D:9B:5E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAFBB3076532BDD6AA1C5807ECBAC4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43420 IP: 77.87.216.0/21 IP: 85.202.32.0/20 IP: 87.199.124.0/23 IP: 109.95.168.0/21 IP: 109.196.224.0/20 IP: 185.129.76.0/22 IP: 193.46.68.0/24 IP: 2a03:9c60::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:fb:b3:07:65:32:bd:d6:aa:1c:58:07:ec:ba:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8efcc976ef90383ace7f0b4e09e4d819ed0d9b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1a:41:e6:1f:1e:13:3e:4e:f2:b6:df:2d:04: 71:b2:58:22:a5:f2:5e:c7:32:8e:d7:58:42:7f:b8: d0:dd:7e:2a:c7:07:ad:39:d0:fb:e8:85:a0:da:f0: 37:26:15:24:88:a5:b2:7c:c9:29:aa:b7:92:0a:be: f1:8a:80:27:56:10:8a:bf:c1:7b:2f:70:d2:69:04: 83:f1:08:43:91:b0:61:f3:4a:18:cc:a7:0b:bc:6b: b5:25:de:aa:b5:17:96:e7:3f:8b:f7:a4:ba:44:fc: 7e:d8:17:75:ef:c4:2d:60:f3:4f:bc:85:d4:e6:d4: a7:d7:ea:e2:f0:0d:9e:85:05:65:50:87:ed:10:5a: 75:36:3a:27:c4:d1:7c:06:68:7f:bc:52:f6:f9:ab: 94:72:a9:00:8c:64:87:8e:0f:80:88:ca:98:a5:33: 54:5c:f6:48:b2:bf:0e:fe:0f:8f:38:6b:39:1a:7f: e9:b9:c1:08:cc:f3:c9:c4:17:c3:8b:6f:58:a1:85: 9c:9d:b9:7d:ce:00:3b:26:fd:e5:a6:c1:7e:70:fd: 2a:1c:8f:76:1e:27:7c:d9:e9:b4:f0:db:d2:e8:71: 99:67:42:dc:c7:cc:b0:da:eb:1d:d1:07:5b:a3:f2: a1:9b:3d:e9:45:f4:e5:70:1f:ae:f5:d1:3e:44:de: 5e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:FC:C9:76:EF:90:38:3A:CE:7F:0B:4E:09:E4:D8:19:ED:0D:9B:5E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.87.216.0/21 85.202.32.0/20 87.199.124.0/23 109.95.168.0/21 109.196.224.0/20 185.129.76.0/22 193.46.68.0/24 IPv6: 2a03:9c60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43420 Signature Algorithm: sha256WithRSAEncryption 2c:f1:5c:36:67:50:2f:cc:65:c9:68:4b:5f:b6:b3:1f:09:f8: 4f:ca:4f:1c:e1:f1:c7:0a:b2:c7:b8:86:3c:fb:20:1a:e6:31: 09:35:a2:b8:85:da:bc:eb:2e:b1:5e:bd:ce:c4:51:e9:f6:32: ed:39:6d:df:8a:b4:2c:4c:69:cd:a7:7c:d2:f1:d9:39:5c:e9: 95:00:68:72:87:e7:04:53:84:09:7e:fe:75:7a:0d:9f:68:59: 49:ad:f0:28:19:a3:82:55:67:70:02:70:bb:70:b0:57:f6:da: 12:81:ad:da:6b:dc:46:56:90:97:cd:16:c9:54:0e:d2:e9:d8: 26:46:0a:e6:c8:67:38:c7:d5:8b:60:a5:54:aa:5e:40:b9:0e: f8:2a:f2:e4:98:04:1b:ab:0f:ea:0c:a2:2d:af:65:83:27:df: 3d:8d:e4:2c:41:af:a5:05:52:4d:ab:a1:d9:7a:8f:90:80:7d: a2:71:76:06:ef:f3:81:0a:b2:40:3c:fa:1c:bf:02:6a:a9:b9: 59:26:1b:a4:7a:23:74:50:91:e6:86:9c:55:fb:f1:37:b2:75: 07:15:c5:36:b8:a4:ca:20:0d:d1:76:87:4c:e8:d8:12:5e:23: f0:51:f5:97:5c:21:16:12:c9:bd:c0:18:f4:b7:ef:b9:7e:3e: cc:14:48:74 -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgISAZt26vuzB2UyvdaqHFgH7LrEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWZjYzk3NmVmOTAzODNhY2U3ZjBiNGUwOWU0ZDgxOWVkMGQ5YjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRpB5h8eEz5O8rbfLQRxslgipfJe xzKO11hCf7jQ3X4qxwetOdD76IWg2vA3JhUkiKWyfMkpqreSCr7xioAnVhCKv8F7 L3DSaQSD8QhDkbBh80oYzKcLvGu1Jd6qtReW5z+L96S6RPx+2Bd178QtYPNPvIXU 5tSn1+ri8A2ehQVlUIftEFp1NjonxNF8Bmh/vFL2+auUcqkAjGSHjg+AiMqYpTNU XPZIsr8O/g+POGs5Gn/pucEIzPPJxBfDi29YoYWcnbl9zgA7Jv3lpsF+cP0qHI92 Hid82em08NvS6HGZZ0Lcx8yw2usd0Qdbo/Khmz3pRfTlcB+u9dE+RN5evwIDAQAB o4IC0zCCAs8wHQYDVR0OBBYEFI78yXbvkDg6zn8LTgnk2BntDZteMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ2LzllNDc2 NC03MjM0LTRiYTQtOGU4YS1lMjc1NGY2ZmI0YzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvOWU0NzY0 LTcyMzQtNGJhNC04ZThhLWUyNzU0ZjZmYjRjNS8xL2p2ekpkdS1RT0RyT2Z3dE9D ZVRZR2UwTm0xNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAwBAIAATAqAwQDTVfYAwQEVcogAwQBV8d8AwQDbV+oAwQEbcTg AwQCuYFMAwQAwS5EMA0EAgACMAcDBQAqA5xgMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwCpnDANBgkqhkiG9w0BAQsFAAOCAQEALPFcNmdQL8xlyWhLX7azHwn4T8pP HOHxxwqyx7iGPPsgGuYxCTWiuIXavOsusV69zsRR6fYy7Tlt34q0LExpzad80vHZ OVzplQBocofnBFOECX7+dXoNn2hZSa3wKBmjglVncAJwu3CwV/baEoGt2mvcRlaQ l80WyVQO0unYJkYK5shnOMfVi2ClVKpeQLkO+Cry5JgEG6sP6gyiLa9lgyffPY3k LEGvpQVSTauh2XqPkIB9onF2Bu/zgQqyQDz6HL8Caqm5WSYbpHojdFCR5oacVfvx N7J1BxXFNrikyiAN0XaHTOjYEl4j8FH1l1whFhLJvcAY9LfvuX4+zBRIdA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:06 2026 by rpki-client